$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json) Hash identifier: jW8qakyGcv2MiIvGmS1Uu8qiODK7xLq5PZIVerTIaHE= Subject key identifier: 01:5C:AA:34:59:F3:56:51:FD:F9:4B:7D:7E:EA:AC:95:5D:4B:F6:66 Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft Manifest number: 6C Signing time: Sun 27 Apr 2025 05:43:47 +0000 Manifest this update: Sun 27 Apr 2025 05:43:47 +0000 Manifest next update: Sun 04 May 2025 05:43:47 +0000 Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: 9fjgVBgmLshBp9eyPttoE9942T4fYYGw46jfBHutY6Y=) 2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: lpawVFjrLTQaiIY8ph0aOBiFjAIuxDOp5nWen5zsXsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E Validity Not Before: Apr 27 05:43:47 2025 GMT Not After : May 4 05:43:47 2025 GMT Subject: CN=680dc413-136c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ea:76:f6:b3:82:99:d6:97:dd:1e:50:66:db: 62:ad:53:8a:db:75:dd:2b:7d:25:5d:6b:e1:4a:4f: c2:f0:00:ec:3b:db:64:c4:bf:d8:f7:2f:f7:e2:4f: b2:5c:b2:49:40:f5:be:73:e3:43:3a:79:c5:e5:2b: 23:ba:e7:db:a8:6d:6d:f3:73:7c:e3:85:fd:82:f6: f2:16:15:58:3b:63:2a:d5:10:3a:1a:e1:5e:99:ca: cc:d9:c3:c4:d6:f6:f8:92:a7:68:fd:1d:b4:23:24: f3:45:05:6c:93:83:4a:5f:bd:3f:59:81:18:29:ba: 79:ab:d3:51:53:73:bf:3c:63:87:c1:cf:a2:93:5e: 21:d7:9f:eb:a8:ad:cb:8c:c2:fe:46:5e:f5:a8:d7: f6:6d:e2:9e:79:7d:28:ee:b7:81:41:00:52:99:18: 36:3b:c3:9a:3e:99:15:80:d2:7a:ba:3c:46:1e:97: 14:92:ea:9e:26:be:ba:6b:b9:9c:1f:92:48:cd:1e: 06:be:69:6d:4d:96:41:88:1b:25:41:74:f7:46:cd: d9:45:92:17:e8:a6:dc:d1:61:3a:d2:f0:76:ca:24: 1d:79:69:1f:54:63:99:52:9f:94:c1:34:e8:d1:61: 32:d1:1a:28:1d:b5:23:8e:96:77:cb:d1:e6:fb:de: c5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5C:AA:34:59:F3:56:51:FD:F9:4B:7D:7E:EA:AC:95:5D:4B:F6:66 X509v3 Authority Key Identifier: keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c4:f2:cf:43:80:a5:64:d2:db:27:cb:38:fd:c2:17:f4:b2: ab:8c:9c:b3:d2:a1:f9:50:48:5d:83:9e:1d:91:9f:f3:10:b0: d8:5c:3a:ff:4a:b9:10:21:d6:59:5e:62:bc:f8:17:61:78:35: f2:be:12:b0:ec:ab:a8:05:bc:6a:b7:57:0c:0d:a7:e5:05:37: 0b:10:f6:11:75:fc:5e:c7:7b:31:55:c1:ac:25:ee:b4:45:9b: 76:12:ef:86:a7:5e:00:78:14:34:d8:02:06:06:d7:b5:eb:83: c3:25:a6:60:2b:c0:24:17:6e:be:79:14:72:d4:2a:38:b5:6d: a9:02:c5:6b:04:57:00:c1:6a:fc:7a:13:41:dc:16:67:b9:fd: 84:3d:33:ce:cf:56:5b:88:fa:e5:87:ea:c6:08:47:81:8b:4c: 61:e6:7f:87:a9:89:ab:d1:4c:8e:11:4b:e2:3e:7b:a1:31:57: 4b:08:a5:d3:8f:34:1d:7e:fe:84:ce:07:26:6f:4b:b8:db:99: 05:5a:fe:1f:da:ca:20:ee:61:fb:2d:cc:05:d0:cf:98:3f:36: a2:1e:f7:31:90:44:f9:dd:f6:44:4f:d8:b2:1d:3e:3e:ed:50: 04:19:28:a1:1a:d5:71:3a:b1:4c:a7:6f:e9:17:33:ed:bb:b1: c8:d4:f5:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkNGRjExMC8GA1UEBRMoRThENkQ0MjEyODJCOTAxOTAwMDA5Nzc2MUEyNTYzMjIz Q0E3ODE1RTAeFw0yNTA0MjcwNTQzNDdaFw0yNTA1MDQwNTQzNDdaMBgxFjAUBgNV BAMTDTY4MGRjNDEzLTEzNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDn6nb2s4KZ1pfdHlBm22KtU4rbdd0rfSVda+FKT8LwAOw722TEv9j3L/fiT7Jc sklA9b5z40M6ecXlKyO659uobW3zc3zjhf2C9vIWFVg7YyrVEDoa4V6ZyszZw8TW 9viSp2j9HbQjJPNFBWyTg0pfvT9ZgRgpunmr01FTc788Y4fBz6KTXiHXn+uorcuM wv5GXvWo1/Zt4p55fSjut4FBAFKZGDY7w5o+mRWA0nq6PEYelxSS6p4mvrpruZwf kkjNHga+aW1NlkGIGyVBdPdGzdlFkhfoptzRYTrS8HbKJB15aR9UY5lSn5TBNOjR YTLRGigdtSOOlnfL0eb73sU/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAVyqNFnz VlH9+Ut9fuqslV1L9mYwHwYDVR0jBBgwFoAU6NbUISgrkBkAAJd2GiVjIjyngV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQ0ZGLzBGQTg1Rjg4ODIx RjExRUZBMURCNEM3NUM0RjlBRTAyLzZOYlVJU2dya0JrQUFKZDJHaVZqSWp5bmdW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNk5iVUlTZ3JrQmtBQUpkMkdpVmpJanluZ1Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG Q0ZGLzBGQTg1Rjg4ODIxRjExRUZBMURCNEM3NUM0RjlBRTAyLzZOYlVJU2dya0Jr QUFKZDJHaVZqSWp5bmdWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH7E8s9DgKVk0tsnyzj9whf0squMnLPSoflQSF2Dnh2Rn/MQsNhcOv9K uRAh1lleYrz4F2F4NfK+ErDsq6gFvGq3VwwNp+UFNwsQ9hF1/F7HezFVwawl7rRF m3YS74anXgB4FDTYAgYG17Xrg8MlpmArwCQXbr55FHLUKji1bakCxWsEVwDBavx6 E0HcFme5/YQ9M87PVluI+uWH6sYIR4GLTGHmf4epiavRTI4RS+I+e6ExV0sIpdOP NB1+/oTOByZvS7jbmQVa/h/ayiDuYfstzAXQz5g/NqIe9zGQRPnd9kRP2LIdPj7t UAQZKKEa1XE6sUynb+kXM+27scjU9YQ= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net